In order to reduce costs and improve employee satisfaction, a large corporation is creating a BYOD policy. It will allow access to email and remote connections to the corporate enterprise from…

Providing free email software standardizes the client application but does not enforce security posture on the device or protect data in transit - it addresses user experience, not security control.

Encrypting data in transit using protocols such as TLS or VPN ensures that sensitive corporate information exchanged between personal devices and enterprise systems cannot be intercepted or read even when traversing untrusted public or home networks that cannot be controlled by the organization.

Requiring smart card authentication is impractical for personal BYOD devices because most consumer smartphones and laptops lack smart card readers, and deploying the necessary PKI infrastructure to every personal device conflicts with the cost-reduction goal of the BYOD policy.

Network Access Control (NAC) evaluates the security posture of devices - checking OS patch level, presence of required security software, and policy compliance - before allowing them onto the corporate network, preventing insecure or compromised personal devices from reaching internal resources.

Time-of-day restrictions limit connection windows but do not validate device security posture or protect data in transit - a compromised device during permitted hours would still pose the same risk.